mixed private/external IPs

Francis A. Vidal francis at usls.edu
Mon Nov 15 05:28:30 UTC 1999


---- Quoting Andris Kalnozols's message, sent 11/14/99 8:11pm ----

> > i tried to make bind8 resolve the proper IP addresses based on the source
> > using the options `sortlist' and `rrset-order'. it works fine with the
> > internal workstations but has problems with external hosts' resolving.
> >
> > the external name resolving doesn't work quite well -- it still gives the
> > internal IP addresses of some servers. for example, proxy.usls.edu is
> > defined with three IP addresses: 2 internal IPs and one external.
> >
> > proxy           IN      A       1.2.3.4     # external
> >                 IN      A       192.168.1.3 # internal
> >                 IN      A       192.168.2.2 # internal
> >
> >
> > the /etc/named.conf entries are as follows:
> >
> > acl lib-network {
> >     192.168.1/24;
> > };
> >
> > acl ofc-network {
> >     192.168.2/24;
> > };
> >
> > acl usls-network {
> >     1.2.3.4/28;
> > };
> >
> > options {
> >
> >     sortlist {
> >         { lib-network;
> >             { lib-network; }; };
> >         { ofc-network;
> >             { ofc-network; }; };
> >         { usls-network; };
> >     };
> >
> >     rrset-order {
> >         class IN type A name "usls.edu" order fixed;
> >         order cyclic;
> >     };
> > };
> >
> > what could be another solution to this setup? thanks!
> >
> 
> Try removing the 'rrset-order' statement and using the following
> sortlist:
> 
>         sortlist {
>                 { localhost; 192.168/16; };
>                 { lib-network; };
>                 { ofc-network; };
>                 { any; !192.168/16; };
>         };

yes, this worked! thanks andris! i just made another acl `internal' which
defines to 192.168/16 :) and made it this way:

	sortlist {
		{ localhost; internal; };
		{ lib-network; };
		{ ofc-network; };
		{ any; !internal; };
	};

-- 
francis vidal	university of st. la salle, bacolod city, philippines
. . . . . . .	PGP key available via e-mail / subject: get PGP key
u s l s N E T	tel nos. (+63.34).433.3526 / fax (+63.34).434.0415



More information about the bind-users mailing list